Misleading Deep-Fake Detection with GAN Fingerprints

by   Vera Wesselkamp, et al.

Generative adversarial networks (GANs) have made remarkable progress in synthesizing realistic-looking images that effectively outsmart even humans. Although several detection methods can recognize these deep fakes by checking for image artifacts from the generation process, multiple counterattacks have demonstrated their limitations. These attacks, however, still require certain conditions to hold, such as interacting with the detection method or adjusting the GAN directly. In this paper, we introduce a novel class of simple counterattacks that overcomes these limitations. In particular, we show that an adversary can remove indicative artifacts, the GAN fingerprint, directly from the frequency spectrum of a generated image. We explore different realizations of this removal, ranging from filtering high frequencies to more nuanced frequency-peak cleansing. We evaluate the performance of our attack with different detection methods, GAN architectures, and datasets. Our results show that an adversary can often remove GAN fingerprints and thus evade the detection of generated images.


page 1

page 2

page 4

page 5


FakePolisher: Making DeepFakes More Detection-Evasive by Shallow Reconstruction

The recently rapid advances of generative adversarial networks (GANs) in...

Leveraging Frequency Analysis for Deep Fake Image Recognition

Deep neural networks can generate images that are astonishingly realisti...

Real or Fake? Spoofing State-Of-The-Art Face Synthesis Detection Systems

The availability of large-scale facial databases, together with the rema...

T-GD: Transferable GAN-generated Images Detection Framework

Recent advancements in Generative Adversarial Networks (GANs) enable the...

BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models

The tremendous progress of autoencoders and generative adversarial netwo...

FakeRetouch: Evading DeepFakes Detection via the Guidance of Deliberate Noise

The novelty and creativity of DeepFake generation techniques have attrac...

A Generative Adversarial Approach with Residual Learning for Dust and Scratches Artifacts Removal

Retouching can significantly elevate the visual appeal of photos, but ma...

Code Repositories


Code accompanying the 2022 DLS paper "Misleading Deep-Fake Detection with GAN Fingerprints"

view repo

Please sign up or login with your details

Forgot password? Click here to reset